Security Analyst

Talent Web Recruitment; Sydney; On-site; AUD 90,000 - 130,000; Full time

Benefits offered by this job

Initial 12-month contract

Sydney CBD location

4-day work week

Job summary

Talent Web Recruitment is seeking a Security Analyst for a Sydney-based role within an international financial services organisation. You understand SOC procedures and possess intermediate to expert level skills equivalent of L2, L3 in a Tiered SOC model.

You will function as part of an enterprise network application-layer intrusion detection, prevention, and response team, developing and implementing custom alerts and monitoring controls to detect and mitigate threats.

Qualifications

• Experience in responding to cyber security incidents within cloud environments (Azure/AWS/GCP).
• Ability to work unsupervised from initial triage through to closure.
• Experience interpreting logging data from a SIEM such as Splunk or Elasticsearch.

Responsibilities

• Member of enterprise network application-layer intrusion detection, prevention, and response team.
• Develop and implement custom alerts and monitoring controls to detect and mitigate threats.
• Provide leadership in assessing new threat vectors and implementing effective controls.
• Leverage data correlation and log analysis tools for investigations.
• Triage security events with senior leaders and report on security initiatives.
• Develop and implement processes or controls to support audit and risk requirements.

Skills

Intrusion analysis

Splunk

Exploit knowledge

Operating systems

Scripting/regex

Network protocols

Logs analysis

Web-applications security

Tools

Elasticsearch

Job description

An international financial services organisation isseeking a skilled Security Analyst to join their Sydney based team. You understand SOC procedures and poses intermediate to expert level skills equivalent of L2, L3 in Tiered SOC model.

Your responsibilities:

• You will function as a member of an enterprise network application-layer intrusion detection, prevention, and response team
• You will develop and implement custom alerts and monitoring controls to detect and mitigate threats
• You will provide leadership in assessing new threat vectors and designing and implementing effective controls
• Leverage advanced investigative skills using best in class data correlation and log analysis tools
• Partner with senior leaders from lines of business organisations to triage security events and report on impacting security initiatives
• Develop and implement processes or controls in support of audit and risk requirements

• Initial 12-month contract
• Sydney CBD location
• 4-day work week

Your role:

An international financial services organisation isseeking a skilled Security Analyst to join their Sydney based team. You understand SOC procedures and poses intermediate to expert level skills equivalent of L2, L3 in Tiered SOC model.

Your responsibilities:

• You will function as a member of an enterprise network application-layer intrusion detection, prevention, and response team
• You will develop and implement custom alerts and monitoring controls to detect and mitigate threats
• You will provide leadership in assessing new threat vectors and designing and implementing effective controls
• Leverage advanced investigative skills using best in class data correlation and log analysis tools
• Partner with senior leaders from lines of business organisations to triage security events and report on impacting security initiatives
• Develop and implement processes or controls in support of audit and risk requirements

Your skills:

• Strong Intrusion Analysis background. You must be able to identify and interpret web and application logs from a security perspective.
• Strong Splunk skill set. You will leverage Splunk to analyze logs and other security events including creating macros, alerts, and dashboards to find targeted attacks against network based bank assets.
• Knowledgeable of current exploits. You must be able to identify common exploits from the appropriate web and event logs.
• Working knowledge of Linux, Windows, and MacOS operating systems
• Comfortable with scripting languages and regular expressions
• Strong knowledge common network protocols, especially HTTP, DNS, TLS
• Working knowledge of enterprise Client / Server architecture

Skills specific to your role:

• Understanding of how web-applications work under the hood and related protocols such as HTTP/HTTPS
• Common attack vectors against web-applications (OWASP top 10 and beyond)
• How to identify attacks/malicious activities through analysis of logs generated by applications, authentication, end-point, security appliances, etc

Your Experience:

• Experience in responding to cyber security incidents within at least one of Azure, AWS or GCP cloud environments
• An investigative and inquisitive approach to incidents, and the ability to work unsupervised on incidents from initial triage through to closure
• Ability to identify, analyse, interpret and present logging data from a SIEM, such as Splunk or Elasticsearch
• Broad awareness of information security operations and/or enterprise information technology

Your working hours will be 40 hours over 4-days per week -Wednesday to Saturday.They are a front-line team that handles active security events and current threats. On call and after hours work can be expected, although they rotate to approximately one week every 2 months.